General
-
Target
2024-05-25_408adf8e8566165abcfcd59f30c783f8_cryptolocker
-
Size
72KB
-
Sample
240525-c33hmsbf2v
-
MD5
408adf8e8566165abcfcd59f30c783f8
-
SHA1
4ca53be33c2ebfa9d7e53cd7eca3ee93a45d383c
-
SHA256
c66fc75bafb3709649feeeca00e834ca70d767343f9e97dbd6c699779741a7bd
-
SHA512
8871fe779f7ae1276295a5ff3cbf72eb48fb778b69f15061b2239249cf8216ac592fce35b51533208b255967391ddce4016c521af26fde7d818596113374fe79
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RR:vj+jsMQMOtEvwDpj5HZYTjipvF24p
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-25_408adf8e8566165abcfcd59f30c783f8_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-25_408adf8e8566165abcfcd59f30c783f8_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-25_408adf8e8566165abcfcd59f30c783f8_cryptolocker
-
Size
72KB
-
MD5
408adf8e8566165abcfcd59f30c783f8
-
SHA1
4ca53be33c2ebfa9d7e53cd7eca3ee93a45d383c
-
SHA256
c66fc75bafb3709649feeeca00e834ca70d767343f9e97dbd6c699779741a7bd
-
SHA512
8871fe779f7ae1276295a5ff3cbf72eb48fb778b69f15061b2239249cf8216ac592fce35b51533208b255967391ddce4016c521af26fde7d818596113374fe79
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RR:vj+jsMQMOtEvwDpj5HZYTjipvF24p
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-